Our takeCCCS updated its Citrix advisory (AV26-996) on CVE-2026-88779 in NetScaler ADC and Gateway; the flaw is exploited in the wild. Update to 13.1-64.28, 14.1-73.41 or later immediately if you run these.Cyber Resilience desk
Sources (1)
- cccs · cccs
What this means for you — Security leader:Update NetScaler ADC and Gateway instances to 13.1-64.28, 14.1-73.41 (or later) immediately. CVE-2026-88779 is confirmed exploited in the wild per CCCS advisory.
What this means for you — Lean IT orgs:If you run Citrix NetScaler ADC or Gateway, update to a fixed version right away (13.1-64.28 or 14.1-73.41). This flaw is already being exploited.
What this means for you — MSP:Audit all client NetScaler ADC and Gateway deployments for versions prior to 13.1-64.28 or 14.1-73.41 and patch immediately; CVE-2026-88779 is under active exploitation.
What this means for you — Researcher:Citrix NetScaler ADC and Gateway prior to 13.1-64.28 and 14.1-73.41 contain CVE-2026-88779, confirmed exploited in the wild per CCCS AV26-996.